Credit: ID 73442306 © Sergey Khakimullin | Dreamstime.com
Imagine this. You’ve been hired to run a company’s cybersecurity team and discover that your team is under-resourced. Not only that, but you’re facing a major corporate event where your threat profile escalates and have a management team that doesn’t see the risks in the same way.
That’s the scenario described by security consultant Ashley Deuble during AusCERT 2019. Leaning on his experience as a cybersecurity professional. Deuble led the audience through a scenario where each step was determined through audience participation.
On arrival at his fictitious new employer, Deuble asked the audience which of three things he ought to focus on first; policies and frameworks, incident response frameworks, or tools and technologies. The crowd chose to go with boosting the tools and tech he would have at his disposal. This is the sort of decision most CSOs need to make. With budgets and personnel often constrained, choices have to be made about where to best spend resources.
With that decision made, Deuble’s…
